Firepower: FMC upgrade plan from 6.6.1 to 6.6.5 because Field Notice

[swscco001]

Hello everybody,

because the 

Cisco Field Notice: FN - 72332 - Firepower Software: Cisco Talos Security Intelligence Updates Might Fail After March 5, 2022 - Software Upgrade Recommended

https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72332.html?emailclick=CNSemail

I checked the FMC of our customer.

The FMCv has rel. 6.6.1 (see attachment)

They have two ASA5516 with rel. 6.6.1 (see attachment).

The Field Notice say the following for the FMC:

Apply Firepower 6.6.5 HotFix
or upgrade to
Firepower 6.6.5.2 or later

I tried to install the Cisco_Firepower_Mgmt_Center_Patch-6.6.5.2-14.sh.REL.tar

but I got the error mesage (see attched):

-------------------------------------------------------------------------------------

Info
No valid appliances available for Cisco Firepower Mgmt Center Patch 6.6.5.2-14

This update is intended for software versions greater than or equal to 6.6.5 and less than 6.6.5.2-14

-------------------------------------------------------------------------------------

What is the right upgrade stragegy here?

What file I have to download to bring the FMC from 6.6.1 to 6.6.5 and do I 

need intermediate steps?

Is it necessary to upgrade the Firepower software on the ASA5516 too?

I would like to hear your recommendation for the upgrade path.

Thanks a lot for your hints!


Bye
R.

[Marvin Rhoads]

The Hotfix DE, also known as 6.6.5.2 patch, can only be installed on 6.6.5 or 6.6.5.1. So, in your case, you must upgrade first and then patch.

[swscco001]

Hi Marvin,

thanks for your fast reaction!

To upgrade the FMCv from rel. 6.6.1 to 6.6.5 without losing the the configured rules do I need to download the file:
Cisco_Firepower_Mgmt_Center_Upgrade-6.6.5-81.sh.REL.tar (see attched screen dump)
and install it? Or do I need to use another file?

Upgrades pathes of Firepower are pretty confusing and the release notes do not answer my question clearly.

Thanks a lot!


Bye
R.

[Marvin Rhoads · Accepted solution]

@swscco001 yes, that's correct.

[swscco001]

Good morning Marvin,

thanks for the fast help!

Greetings,
R.